Red Hat Security Advisory

RHSA-2024:1082

gnutls security update

Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) gnutls-c++-3.7.6-21.el9_2.2, gnutls-dane-3.7.6-21.el9_2.2, gnutls-devel-3.7.6-21.el9_2.2 +1
Red Hat Enterprise Linux BaseOS EUS (v.9.2) gnutls-3.7.6-21.el9_2.2

TI-2024-00525 CVE-2024-0567 · GHSA-mcx8-9rrj-7qxm

HIGH 72

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01392 Published 2024-01-16 Partial fix · 3.8.3, 3.7.6-23.el9_3.3 +36 CWE-347

TI-2024-00511 CVE-2024-0553 · GHSA-x697-v25m-6phv

MEDIUM 42

A vulnerability was found in GnuTLS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01614 Published 2024-01-16 Partial fix · 3.8.3, 3.6.16-8.el8_9.1 +39 CWE-203